| Author |
Topic |
|
GaryTurpin
Starting Member
4 Posts |
 Posted - 2008-05-12 : 16:18:59
|
| I only give a user permission to update and connect to the database and I get an error that I need select permission as well when I run an update. Is this normal? I also have the same issue with delete permission and needing select permission. Thanks for any help you provide. |
|
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-05-12 : 16:23:53
|
| Is it for specific object or whole database? |
 |
|
|
GaryTurpin
Starting Member
4 Posts |
Posted - 2008-05-12 : 16:26:07
|
| It is for the entire database for userUpdate. |
|
|
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-05-12 : 16:27:46
|
| give him db_datareader and db_datawriter permission. |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2008-05-12 : 16:35:18
|
| GaryTurpin,This is not normal. I am not able to reproduce your problem. I created a table in one of my databases, created a login, added the login to the database, granted update to the new table and then logged in with my new user and was able to update the table without any other permissions.Please post your update statement.Tara KizerMicrosoft MVP for Windows Server System - SQL Serverhttp://weblogs.sqlteam.com/tarad/Database maintenance routines:http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx |
|
|
|
GaryTurpin
Starting Member
4 Posts |
Posted - 2008-05-12 : 16:37:43
|
| This would give me permissions to insert, delete, select, and update but I am trying to limit permission. The reason behind this is to help prevent from sql injection on our website. |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2008-05-12 : 16:39:07
|
| Did you see my post?Tara KizerMicrosoft MVP for Windows Server System - SQL Serverhttp://weblogs.sqlteam.com/tarad/Database maintenance routines:http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx |
|
|
|
GaryTurpin
Starting Member
4 Posts |
Posted - 2008-05-12 : 16:42:38
|
| I just saw that. Thank you. |
|
|
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-05-12 : 16:47:18
|
| "It is for the entire database for userUpdate."so you need only for specific objects. |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2008-05-12 : 16:51:10
|
| sodeep, your first question wasn't clear. He interpreted your question to mean "are you getting the error on all objects", whereas your question was "do you want the permissions on all objects". Next time, be more clear.Tara KizerMicrosoft MVP for Windows Server System - SQL Serverhttp://weblogs.sqlteam.com/tarad/Database maintenance routines:http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx |
|
|
|
|
Update permission